ID

VAR-202301-1708


CVE

CVE-2023-23512


TITLE

Vulnerabilities in multiple Apple products

Trust: 0.8

sources: JVNDB: JVNDB-2023-004372

DESCRIPTION

The issue was addressed with improved handling of caches. This issue is fixed in watchOS 9.3, tvOS 16.3, macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. Visiting a website may lead to an app denial-of-service. iPadOS , iOS , macOS Unspecified vulnerabilities exist in multiple Apple products.Service operation interruption (DoS) It may be in a state. Instructions on how to update your Apple Watch software are available at https://support.apple.com/kb/HT204641 To check the version on your Apple Watch, open the Apple Watch app on your iPhone and select "My Watch > General > About". Alternatively, on your watch, select "My Watch > General > About". -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2023-01-23-1 iOS 16.3 and iPadOS 16.3 iOS 16.3 and iPadOS 16.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/HT213606. AppleMobileFileIntegrity Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later Impact: An app may be able to access user-sensitive data Description: This issue was addressed by enabling hardened runtime. CVE-2023-23499: Wojciech Reguła (@_r3ggi) of SecuRing (wojciechregula.blog) ImageIO Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later Impact: Processing an image may lead to a denial-of-service Description: A memory corruption issue was addressed with improved state management. CVE-2023-23519: Yiğit Can YILMAZ (@yilmazcanyigit) Kernel Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later Impact: An app may be able to leak sensitive kernel state Description: The issue was addressed with improved memory handling. CVE-2023-23500: Pan ZhenPeng (@Peterpan0927) of STAR Labs SG Pte. Ltd. (@starlabs_sg) Kernel Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later Impact: An app may be able to determine kernel memory layout Description: An information disclosure issue was addressed by removing the vulnerable code. CVE-2023-23502: Pan ZhenPeng (@Peterpan0927) of STAR Labs SG Pte. Ltd. (@starlabs_sg) Kernel Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later Impact: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. CVE-2023-23504: Adam Doupé of ASU SEFCOM Mail Drafts Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later Impact: The quoted original message may be selected from the wrong email when forwarding an email from an Exchange account Description: A logic issue was addressed with improved state management. CVE-2023-23498: an anonymous researcher Maps Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later Impact: An app may be able to bypass Privacy preferences Description: A logic issue was addressed with improved state management. CVE-2023-23503: an anonymous researcher Safari Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later Impact: Visiting a website may lead to an app denial-of-service Description: The issue was addressed with improved handling of caches. CVE-2023-23512: Adriatik Raci Screen Time Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later Impact: An app may be able to access information about a user’s contacts Description: A privacy issue was addressed with improved private data redaction for log entries. CVE-2023-23505: Wojciech Reguła of SecuRing (wojciechregula.blog) Weather Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later Impact: An app may be able to bypass Privacy preferences Description: The issue was addressed with improved memory handling. CVE-2023-23511: Wojciech Regula of SecuRing (wojciechregula.blog), an anonymous researcher WebKit Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: The issue was addressed with improved checks. WebKit Bugzilla: 245464 CVE-2023-23496: ChengGang Wu, Yan Kang, YuHao Hu, Yue Sun, Jiming Wang, JiKai Ren and Hang Shu of Institute of Computing Technology, Chinese Academy of Sciences WebKit Available for: iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: The issue was addressed with improved memory handling. WebKit Bugzilla: 248268 CVE-2023-23518: YeongHyeon Choi (@hyeon101010), Hyeon Park (@tree_segment), SeOk JEON (@_seokjeon), YoungSung Ahn (@_ZeroSung), JunSeo Bae (@snakebjs0107), Dohyun Lee (@l33d0hyun) of Team ApplePIE WebKit Bugzilla: 248268 CVE-2023-23517: YeongHyeon Choi (@hyeon101010), Hyeon Park (@tree_segment), SeOk JEON (@_seokjeon), YoungSung Ahn (@_ZeroSung), JunSeo Bae (@snakebjs0107), Dohyun Lee (@l33d0hyun) of Team ApplePIE Additional recognition Kernel We would like to acknowledge Nick Stenning of Replicate for their assistance. Shortcuts We would like to acknowledge Baibhav Anand Jha from ReconWithMe and Cristian Dinca of Tudor Vianu National High School of Computer Science, Romania for their assistance. WebKit We would like to acknowledge Eliya Stein of Confiant for their assistance. This update is available through iTunes and Software Update on your iOS device, and will not appear in your computer's Software Update application, or in the Apple Downloads site. Make sure you have an Internet connection and have installed the latest version of iTunes from https://www.apple.com/itunes/ iTunes and Software Update on the device will automatically check Apple's update server on its weekly schedule. When an update is detected, it is downloaded and the option to be installed is presented to the user when the iOS device is docked. We recommend applying the update immediately if possible. Selecting Don't Install will present the option the next time you connect your iOS device. The automatic update process may take up to a week depending on the day that iTunes or the device checks for updates. You may manually obtain the update via the Check for Updates button within iTunes, or the Software Update on your device. To check that the iPhone, iPod touch, or iPad has been updated: * Navigate to Settings * Select General * Select About. The version after applying this update will be "iOS 16.3 and iPadOS 16.3". All information is also posted on the Apple Security Updates web site: https://support.apple.com/en-us/HT201222. This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEBP+4DupqR5Sgt1DB4RjMIDkeNxkFAmPPIl4ACgkQ4RjMIDke NxniSRAAoaTuBBV5jk91bJapaGf/pqZV+h9vAV9B7sHzBRaJRq5fnoEm+Kdg6fS4 XZtTWhB9NXekrujHVMZC/AvboChvc94r1/qoF6vhVu1YYaDJkryFMlX4lbk5Jz7h k3gXHCpdARbburX46g0Fi9M6bL6dzG/6f4LG9L27dno5G/lcjHY9ylSnHHwuFcva 7kH2os9FmD3JMiopLwNKymfN1Z5AgC9TrDfztOcUChULBSxtx3eOP1+HWbpuQ6go vnEzAnnpoBl09f7EMfgGu4FpZiThsfFUCXNkdl23E+i8PrdRWW17Nqoqrnvb74pF jWOaelBBCdNee7TpfgfkGKT/PVADdoLdYmB5tqowvNWBfJ7ymB0Cir9BX74Iu0ld OcV49WJO4tr5swBF/Tgqx/k8dl8gj56g4tq+O+5TZZS42ep0l5JKgbpQtcGtujMZ CagKnA1+TM53yaSX6CJG/B09PnIUIow3jsx+FQlCUPo1Nl/kDWKLcZ7C9dIHjgaV Z9SZ5g0nalb5J4BY6wjuq/46FTewOH0bpGj5j992cNYM4aYUBDWvziXnlawuFzrw /tzA8xO2DUTpNPDdxixVfAIn9cp/VXK1mrj5BEGYXphvog+5E4vGDx9Ejth9qOSl zf1GlpaiipDI/bUjUz+A664r7/y88ulO8xB0xaANzr3xjwWI5JA= =sqSC -----END PGP SIGNATURE-----

Trust: 1.98

sources: NVD: CVE-2023-23512 // JVNDB: JVNDB-2023-004372 // VULHUB: VHN-451823 // PACKETSTORM: 170699 // PACKETSTORM: 170693 // PACKETSTORM: 170764

AFFECTED PRODUCTS

vendor:applemodel:macosscope:ltversion:13.2

Trust: 1.0

vendor:applemodel:macosscope:gteversion:13.0

Trust: 1.0

vendor:applemodel:watchosscope:ltversion:9.3

Trust: 1.0

vendor:applemodel:iphone osscope:ltversion:16.3

Trust: 1.0

vendor:applemodel:tvosscope:ltversion:16.3

Trust: 1.0

vendor:applemodel:ipadosscope:ltversion:16.3

Trust: 1.0

vendor:アップルmodel:iosscope: - version: -

Trust: 0.8

vendor:アップルmodel:macosscope: - version: -

Trust: 0.8

vendor:アップルmodel:tvosscope: - version: -

Trust: 0.8

vendor:アップルmodel:ipadosscope: - version: -

Trust: 0.8

vendor:アップルmodel:watchosscope:eqversion:9.3

Trust: 0.8

sources: JVNDB: JVNDB-2023-004372 // NVD: CVE-2023-23512

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2023-23512
value: MEDIUM

Trust: 1.0

NVD: CVE-2023-23512
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-202301-1784
value: MEDIUM

Trust: 0.6

nvd@nist.gov: CVE-2023-23512
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 2.8
impactScore: 3.6
version: 3.1

Trust: 1.0

NVD: CVE-2023-23512
baseSeverity: MEDIUM
baseScore: 6.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2023-004372 // CNNVD: CNNVD-202301-1784 // NVD: CVE-2023-23512

PROBLEMTYPE DATA

problemtype:NVD-CWE-noinfo

Trust: 1.0

problemtype:Lack of information (CWE-noinfo) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2023-004372 // NVD: CVE-2023-23512

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202301-1784

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202301-1784

PATCH

title:HT213605 Apple  Security updateurl:https://support.apple.com/en-us/HT213599

Trust: 0.8

title:Apple tvOS Security vulnerabilitiesurl:http://123.124.177.30/web/xxk/bdxqById.tag?id=222829

Trust: 0.6

sources: JVNDB: JVNDB-2023-004372 // CNNVD: CNNVD-202301-1784

EXTERNAL IDS

db:NVDid:CVE-2023-23512

Trust: 3.6

db:PACKETSTORMid:170764

Trust: 0.8

db:JVNDBid:JVNDB-2023-004372

Trust: 0.8

db:CNNVDid:CNNVD-202301-1784

Trust: 0.6

db:PACKETSTORMid:170693

Trust: 0.2

db:VULHUBid:VHN-451823

Trust: 0.1

db:PACKETSTORMid:170699

Trust: 0.1

sources: VULHUB: VHN-451823 // JVNDB: JVNDB-2023-004372 // PACKETSTORM: 170699 // PACKETSTORM: 170693 // PACKETSTORM: 170764 // CNNVD: CNNVD-202301-1784 // NVD: CVE-2023-23512

REFERENCES

url:https://support.apple.com/en-us/ht213601

Trust: 2.3

url:https://support.apple.com/en-us/ht213599

Trust: 1.7

url:https://support.apple.com/en-us/ht213605

Trust: 1.7

url:https://support.apple.com/en-us/ht213606

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2023-23512

Trust: 1.1

url:https://cxsecurity.com/cveshow/cve-2023-23512/

Trust: 0.6

url:https://packetstormsecurity.com/files/170764/apple-security-advisory-2023-01-24-1.html

Trust: 0.6

url:https://nvd.nist.gov/vuln/detail/cve-2023-23518

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2023-23503

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2023-23504

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2023-23511

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2023-23519

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2023-23499

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2023-23496

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2023-23517

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2023-23502

Trust: 0.3

url:https://www.apple.com/support/security/pgp/

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2023-23500

Trust: 0.3

url:https://support.apple.com/en-us/ht201222.

Trust: 0.3

url:https://nvd.nist.gov/vuln/detail/cve-2023-23505

Trust: 0.2

url:https://support.apple.com/ht213599.

Trust: 0.1

url:https://support.apple.com/kb/ht204641

Trust: 0.1

url:https://support.apple.com/ht213606.

Trust: 0.1

url:https://www.apple.com/itunes/

Trust: 0.1

url:https://nvd.nist.gov/vuln/detail/cve-2023-23498

Trust: 0.1

url:https://support.apple.com/ht213601.

Trust: 0.1

sources: VULHUB: VHN-451823 // JVNDB: JVNDB-2023-004372 // PACKETSTORM: 170699 // PACKETSTORM: 170693 // PACKETSTORM: 170764 // CNNVD: CNNVD-202301-1784 // NVD: CVE-2023-23512

CREDITS

Apple

Trust: 0.3

sources: PACKETSTORM: 170699 // PACKETSTORM: 170693 // PACKETSTORM: 170764

SOURCES

db:VULHUBid:VHN-451823
db:JVNDBid:JVNDB-2023-004372
db:PACKETSTORMid:170699
db:PACKETSTORMid:170693
db:PACKETSTORMid:170764
db:CNNVDid:CNNVD-202301-1784
db:NVDid:CVE-2023-23512

LAST UPDATE DATE

2024-08-14T12:44:31.885000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-451823date:2023-03-04T00:00:00
db:JVNDBid:JVNDB-2023-004372date:2023-10-30T04:13:00
db:CNNVDid:CNNVD-202301-1784date:2023-03-06T00:00:00
db:NVDid:CVE-2023-23512date:2023-07-27T04:15:13.983

SOURCES RELEASE DATE

db:VULHUBid:VHN-451823date:2023-02-27T00:00:00
db:JVNDBid:JVNDB-2023-004372date:2023-10-30T00:00:00
db:PACKETSTORMid:170699date:2023-01-24T16:41:48
db:PACKETSTORMid:170693date:2023-01-24T16:39:35
db:PACKETSTORMid:170764date:2023-01-27T15:06:30
db:CNNVDid:CNNVD-202301-1784date:2023-01-24T00:00:00
db:NVDid:CVE-2023-23512date:2023-02-27T20:15:14.133